AMDGPU Kernel Heap Buffer Overflow DoS

The vulnerability in the drivers/gpu/drm/amd/amdgpu/gmcv120.c driver of the AMDGPU core in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2019-7317 affecting package fltk for versions less than 1.3.8-1

CVE-2019-7317 affecting package fltk for versions less than 1.3.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-35357 affecting package gsl for versions less than 2.8-1

CVE-2020-35357 affecting package gsl for versions less than 2.8-1. An upgraded version of the package is available that resolves this issue...

Automating Security Audit Using Large Language Model Based Agent: an Exploration Experiment

In the current rapidly changing digital environment, businesses are under constant stress to ensure that their systems are secured. Security audits help to maintain a strong security posture by ensuring that policies are in place, controls are implemented, gaps are identified for cybersecurity...

Dell PowerScale OneFS resource management error vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A denial of service vulnerability exists in Dell PowerScale OneFS, which arises from uncontrolled resource consumption and can be exploited by an attacker to caus...

visionOS iOS iPadOS tvOS macOS Sequoia Access Control Disclosure

The vulnerability of operating systems visionOS, iOS, iPadOS, tvOS, and macOS Sequoia is related to lack of access control. Exploiting this vulnerability can allow attackers to disclose protected information...

Safari XSS

The vulnerability of the Safari browser on iPadOS and iOS operating systems relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to carry out XSS attacks...

Windows RRAS Disclosure

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Windows RRAS Disclosure

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

iPadOS iOS Information Disclosure

The vulnerability of iPadOS and iOS operating systems is related to access control errors. Exploiting this vulnerability can allow a malicious actor to disclose confidential information by connecting to the device...

UrlMon Bypass

The vulnerability of the UrlMon component in Windows operating systems relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Windows deployment DoS

The vulnerability of the Windows operating system’s deployment process exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Windows RRAS Disclosure

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2025-0134

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

PT-2025-29485 · Мартин Прикрыл · Winscp

Уязвимость графического клиента протоколов SFTP и SCP WinSCP операционной системы Windows связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю создать специальный файл и контролировать его путь на удаленном сервере...

Palo Alto Networks PAN-OS code-related vulnerabilities

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from a lack of anomaly checking could lead to a denial of service attack...

FaceTime DoS

The vulnerability of the FaceTime video/audio call technology in iPadOS and iOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CoreText Unauthorized Access

The vulnerability of the CoreText component in iPadOS, iOS, tvOS, and MacOS operating systems relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to deficiencies in the mechanism for checking input data. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

RepairKit Component Data Compromise

The vulnerability of the RepairKit component in iPadOS, iOS, and visionOS is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality of protected information...